Skip to content

How to add predictive analytics into your risk program. Risk reports are often limited to historical insights and issues and do not provide guidance and insights into the future of the organization. Adding predictive analytics can allow your organization to detect emerging risks and create mitigation plans. This can be achieved by combining internal and external key risk indicators (KRIs) and key performance indicators (KPIs) with regulatory intelligence. This ensures that risk reports can detect more issues and highlight areas of concern. Click here to learn more.


Top Story Technology Related

11/15/2019

FFIEC IT exam handbook revised

The Federal Financial Institutions Examination Council (FFIEC) has revised the "Business Continuity Management" booklet, one of a series of booklets that make up the FFIEC Information Technology Examination Handbook (IT Handbook). The revised "Business Continuity Management" booklet provides information for examiners to assess the adequacy of a bank’s risk management related to the availability of critical financial products and services. The revised booklet replaces the "Business Continuity Planning" booklet issued in February 2015 and rescinds OCC Bulletin 2015-9, "FFIEC Information Technology Examination Handbook: Strengthening the Resilience of Outsourced Technology Services, New Appendix for Business Continuity Planning Booklet."

11/13/2019

Tech company to implement data security program

InfoTrax Xystems, L.C., a Utah-based technology company, has agreed to implement a comprehensive data security program to settle Federal Trade Commission allegations that the company failed to put in place reasonable security safeguards. A complaint filed by the FTC alleged that the failure to put in place reasonable, low-cost, and readily available security protections to safeguard the personal information it maintained on behalf of its clients allowed a hacker to access the personal information of a million consumers.

11/08/2019

Nevada company sued by FTC

The Federal Trade Commission has sued a Nevada data storage services company over allegations that it misled consumers about its participation in the EU-U.S. Privacy Shield framework and failed to adhere to the program’s requirements before allowing its certification to lapse. The Complaint filed by the FTC alleges that, between January 2017 and October 2018, RagingWire Data Centers, Inc. claimed in its online privacy policy that the company participated in the Privacy Shield framework and complied with the program’s requirements, even though it had allowed its certification to lapse in January 2018. The Department of Commerce warned Raging Wire twice to either remove the claims or take steps to recertify its participation in the Privacy Shield program. The company, however, failed to recertify until it was contacted by the FTC in October 2018.

11/08/2019

Greenfield named Deputy Comptroller for Operational Risk

The OCC has announced Kevin Greenfield will become the agency’s Deputy Comptroller for Operational Risk. He will oversee development of policy and examination procedures addressing operational risk, bank information technology, cybersecurity, critical infrastructure resilience, payments systems, and corporate and risk governance. Greenfield previously served as the OCC’s Director for Bank Information Technology for the Operational Risk Division.

10/25/2019

U.S. financial regulators join GFIN

The FDIC, OCC, SEC, and Community Futures Trading Commission (CFTC) have announced they are joining the Global Financial Innovation Network (GFIN). The agencies join 46 other financial authorities, central banks, and international organizations from around the globe that are members of the GFIN to foster greater cooperation among financial authorities on a variety of innovation topics, regulatory approaches, and lessons learned.

10/22/2019

FinCEN to host Innovation Hours in New York

The Financial Crimes Enforcement Network has announced that it will host "Innovation Hours" in New York City on November 13-14, 2019. Financial technology (FinTech), and Regulatory technology (RegTech) companies, and financial institutions will have the opportunity to present their innovative products, services, and approaches designed to enhance anti-money laundering and countering the financing of terrorism (AML/CFT) efforts. Companies interested in meeting with FinCEN in New York should submit a web request no later than November 1, 2019, and provide applicable background information about their firm’s business and innovative products. Primary consideration for requests will be given to entities that are at the operational stage. Preference will be given to companies located within the greater New York City metropolitan area and the number of individual sessions will be limited.

10/22/2019

FDICconnect's secure file exchange

The FDIC has issued FIL-63-2019 announcing the FDIC's new Enterprise File Exchange (EFX) module via FDICconnect. EFX is a secure application for FDIC-insured institutions to exchange examination-related documentation with the FDIC and State banking authorities.

EFX replaced FDICconnect's Examination File Exchange (EFE) on September 30 as the primary tool for exchanging those documents. EFE will continue to be used for ongoing exams commenced before September 30, and will be phased out around April 1, 2020.

10/17/2019

Hundreds charged worldwide in takedown of child porn network

U.S. Immigration and Customs Enforcement has reported that Jong Woo Son, 23, a South Korean national, was indicted by a federal grand jury in the District of Columbia for his operation of Welcome To Video, the largest child sexual exploitation market by volume of content. The nine-count indictment was unsealed Wednesday along with a parallel civil forfeiture action. Son has also been charged and convicted in South Korea and is currently in custody serving his sentence in South Korea. An additional 337 site users residing in 23 states and D.C. as well as the United Kingdom, South Korea, Germany, Saudi Arabia, the United Arab Emirates, the Czech Republic, Canada, Ireland, Spain, Brazil and Australia have been arrested and charged. Two of those charged were Homeland Security employees—a Homeland Security Investigations special agent and a U.S. Border Patrol agent..

This Darknet website is among the first of its kind to monetize child exploitation videos using bitcoin. In fact, the site itself boasted over one million downloads of child exploitation videos by users. Each user received a unique bitcoin address when the user created an account on the website. An analysis of the server revealed that the website had more than one million bitcoin addresses, signifying that the website had capacity for at least one million users. The law enforcement operation is responsible for the rescue of at least 23 minor victims residing in the United States, Spain and the United Kingdom, who were being actively abused by the users of the site.

10/08/2019

OCC Innovation Office Hours in Las Vegas

The OCC has announced it will hold Innovation Office Hours on October 28 in Las Vegas to promote responsible innovation in the federal banking system.

Office Hours are one-on-one meetings with Office of Innovation staff to discuss financial technology (fintech), new products or services, partnering with a bank or fintech company, or other matters related to responsible innovation in the federal banking system. OCC staff will provide feedback and respond to questions. Each meeting will last no longer than one hour. Requests for Office Hours sessions must be submitted by October 18.

10/02/2019

2020 OCC bank supervision operating plan

The OCC has released its bank supervision operating plan for fiscal year 2020. Supervisory strategies will focus on—

  • cybersecurity and operational resiliency
  • BSA/AML compliance management
  • commercial and retail credit underwriting practices and oversight and control functions
  • impact of changing interest rate outlooks on bank activities and risk exposures
  • preparedness for the current expected credit losses (CECL) account standard, and preparation for the potential phase-out of LIBOR
  • technological innovation and implementation

Pages

Training View All

Penalties View All

Search Top Stories